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Response to Amendment 

1. .A request for continued examination under 37 CFR 1.114, including the fee set 
forth in 37 CFR 1.17(e), was filed in this application after final rejection. Since this 
application is eligible for continued examination under 37 CFR 1.114, and the fee set 
forth in 37 CFR 1.17(e) has been timely paid, the finality of the previous Office action 
has been withdrawn pursuant to 37 CFR 1.114. Applicant's submission filed on 
November 16 th , 2007 has been entered. Claims 1-22 are presented for the further 
examination. 



Response to Arguments 

2. Applicant's arguments filed November 16 th , 2007 have been fully considered but 
they are not persuasive. As per arguments filed on November 16 th , 2007, applicant 
argues to the substance that: 

a. Gupta failed to disclose the application data is submitted to the network 
application without reentry by a user in case that the session has expired. 

In response to applicant argument a) wherein the application data is submitted to 
the network application without reentry by a user in case that the session has 
expired (see column 5, line 42 - column 6, line 45). Examiner respectfully 
submits to refer back to the previous office action as examiner has already 
responded to this argument in previous office action mailed on August 16 th , 2007. 
It is still unclear whether a "session" is between two communicating device or 
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between two communicating applications . Examiner respectfully submits to 
clarify "user" roles in claim language with respect to communicating device and 
establishing a session with that communicating device. 

However, Gupta briefly discloses "Cookie mechanism to authenticate user 
on the Internet. Cookies are small pieces of information stored on individual's 
browsers that can later be read back from the browser . When a web site is 
accessed, a cookie may be sent by the web site identifying itself to the web 
browse r. Cookies are stored by the browser and may be read back by a server at 
a later date. Cookies may be utilized for a variety of reasons including the ability 
to personalize information, to perform targeted advertising, or to track popular 
links or demographics. For example, a book store on the web may store a cookie 
that contains the user's name and password. Thereafter, whenever the user 
accesses the book store's web site, the cookie is retrieved, and the user need not 
log in to the book store's site. 

Cookies can store a variety of information including database information 
and custom page settings. A cookie is merely an HTTP header that consists of a 
text-only string that gets entered into the memory of a browser. The string 
contains information (referred to as "parameters") such as the name of the 
cookie, the value of the cookie, t he expiration date of the cookie, t he path the 
cookie is valid for, the domain the cookie is valid for and the need for a secure 
connection to exist to use the cookie. Each cookie has a name and value. For 



example, the name of a cookie may correspond to the web site owner's name 
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(e.g., SUNJD may be the name of the cookie for Sun Microsystems.TM.) and 
the value may be an identification number for the particular user. B y utilizing a 
name and value, a web site may store personal information to be displayed to a 
particular user every time the cookie from that user is retrieved by the server . 
The expiration parameter defines the lifetime of the cookie (e.g., how long the 
cookie is valid for). The pat h parameter defines the URL path the cookie is valid 
for (i.e., web pages outside of the specified path cannot read or use the cookie) . 
The domain parameter specifies the domain that can access the cookie. For 
example, if the domain parameter is ".sun. com", only cookie requests that 
originate from pages located on the ".sun.com" domain server will be permitted. 
Further, after a server sends a cookie to a browser, any future requests made by 
the browser to the parameters specified in the cookie (e.g., the specified path 
and domain) the browser forwards the cookie with the request. The secure 
parameter is either TRUE or FALSE depending on whether a secure server 
condition is required to access the particular cookie. 

By utilizing cookies, a server can authenticate a user based on the cookie 
(i.e., by reading the name and variable stored in the cookie) and not reguire a 
user to reauthenticate itself each time (emphasis added). The first time a 
client/user accesses a server, the server may authenticate a user (e.g., using a 
user name and password mechanism) and issues a cookie with a name and 
variable that uniguelv identifies the authenticated client. For example, after 
authenticating a user, a server may generate a unique random number, create a 
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cookie with the unique random number as a value, and transmit the cookie back 
to the user's browser. The server may also store the user's information (in the 
server) using the unique random number as a key. Thereafter, the cookie is 
similar to a key in that the server merely retrieves the cookie (with the identifying 
information (e.g., using the unique random number as a key)) instead of requiring 
the user to reenter a username and password [user name and password is part 
of application data (emphasis added)!. " 

Therefore, Gupta does disclose the application data is submitted to the 
network application without reentry by a user in case that the session has 
expired. 

Claim Rejections - 35 USC §112 

3. The following is a quotation of the second paragraph of 35 U.S.C. 1 12: 

The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 

4. Claims 1-22 are rejected under 35 U.S.C. 112, second paragraph, as being 
indefinite for failing to particularly point out and distinctly claim the subject matter which 
applicant regards as the invention. 

Claims 1-9, 10, 15 and 18 recite the limitation "during a session ". It is 
unclear what "session" applicant is referring to. There are many possibility of 
session when obtaining application data in computer implemented method. Also, 
it is not clear in claim language who is requesting application data and from 
whom. In order to establish a "session" one having ordinary skilled in the art 
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would required at least a user, or requesting party or client or computer, to 
establish a "session with the network application" and a server or service 
provider or vendor to provide that particular network application. However, 
applicant failed to provide such information in claim language and therefore, 
there is insufficient antecedent basis for this limitation in the claim. 

Claims 1, 10, 15, and 18 still discloses "obtaining a data page from a 
network application during a session with the network application: receiving the 
application data using the data page; ensuring that the session is valid; and 
submitting the application data to the network application when the session is 
valid, wherein the application data is submitted to the network application without 
reentry by a user in case that the session has expired. " 

Examiner agrees to the applicant statement "one of ordinary skill in the art 
would know what needed to be provided in order to practice the teaching of 
claimed invention." 

However, based on what is disclosed in claims 1, 10, 15 and 18, claimed 
invention still failed to show: (1) How one having ordinary skilled in the art would 
obtain a data page from a network application? (2) How « one having ordinary 
skilled in the art would receive the application data? (3) How one having ordinary 
skilled in the art would ensure that session is valid? (4) How one having ordinary 
skilled in the art would submit the application data and where to submit the 
application data ? 
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Claim 4 recites the limitation "determining if it is probable that the session 
has expired". It is still not clear whether the session has expired. There is 
insufficient antecedent basis for this limitation in the claim. 

Claim Rejections - 35 USC § 101 

5. 35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or composition of 
matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the 
conditions and requirements of this title. 

6. Claims 18-22 are rejected under 35 U.S.C. 101 because the claimed invention is 
directed to non-statutory subject matter. 

Claim 18 recite the limitation "a program product stored on a readable 
medium when executed comprises: program code". It appears that program 
product of claims 18-22 can be implemented by software only. Paragraph 42 of 
specification admitted that the present invention could be realized in software 
also and therefore, the claims lack the necessary physical articles or objects to 
constitute a machine or a manufacture within the meaning of 35 USC 101. They 
are clearly not a series of steps or acts to be a process nor are they a 
combination of chemical compounds to be a composition of matter. As such, they 
fail to fall within a statutory category. They are, at best, functional descriptive 
material perse. 

Descriptive material can be characterized as either "functional descriptive 
material" or "nonfunctional descriptive material." Both types of "descriptive 
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material" are nonstatutory when claimed as descriptive material per se, 33 F.3d 
at 1360, 31 USPQ2d at 1759. When functional descriptive material is recorded 
on some computer-readable medium, it becomes structurally and functionally 
interrelated to the medium and will be statutory in most cases since use of 
technology permits the function of the descriptive material to be realized. 
Compare In re Lowry, 32 F.3d 1579, 1583-84, 32 USPQ2d 1031, 1035 (Fed. Cir. 
1994) 

Merely claiming nonfunctional descriptive material, i.e., abstract ideas 
stored on a computer-readable medium, in a computer, or on an electromagnetic 
carrier signal, does not make it statutory. See Diehr, 450 U.S. at 185-86, 209 
USPQ at 8 (noting that the claims for an algorithm in Benson were unpatentable 
as abstract ideas because "[t]he sole practical application of the algorithm was in 
connection with the programming of a general purpose computer."). 

Claim Rejections - 35 USC § 102 

7. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 

8. Claims 1- 22 are rejected under 35 U.S.C. 102(b) as being anticipated by Gupta 
et al. U.S. Patent Number 6,226,752 B1 (hereinafter Gupta). 
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As per claim 1, Gupta discloses obtaining a data page from a network 
application during a session (see column 2, lines 15- 67, Figure 3); receiving an 
original submission of the application data using the data page (see column 2, 
lines 15- 67, Figure 3); ensuring that the session is valid (see column 4, line 30 - 
column 5, line 41; Figure 3); and submitting the application data to the network 
application when the session is valid (see column 4, line 30 - column 5, line 41; 
Figure 3)_wherein the application data is submitted to the network application 
without reentry by a user in case that the session is invalid (see column 5, line 
42- column 6, line 45, using cookies to submit user data to authenticate a user 
and not require a user to re authenticate itself as user name and variable are 
stored in the cookie). 

As per claim 2, Gupta discloses establishing the session with the network 
application (see column 4, line 30 - column 5, line 41; Figure 3). 

As per claim 3, Gupta discloses receiving a submission request for the 
application data (see column 4, line 30 - column 5, line 41; Figure 3). 

As per claim 4, Gupta discloses determining if it is probable that the 
session may have expired (see column 5, line 42 - column 6, line 51; column 7, 
lines 1-15; Figure 4); and querying the network application for a session status if 
the session may have expired (see column 5, line 42 - column 6, line 51; column 
7, lines 1-15; Figure 4). 

As per claim 5, Gupta discloses sending a request to the network 
application (see column 4, line 30 - column 5, line 41; Figure 3); and determining 



Application/Control Number: Page 10 

10/717,352 

Art Unit: 2151 

whether a login page is received from the network application in response to the 
request (see column 4, line 30 - column 5, line 41; Figure 3). 

As per claim 6, Gupta discloses obtaining a session time remaining at a 
first time (see column 5, line 42 - column 6, line 51; column 7, lines 1-15; column 
11, line 45 - column 12, line 6; Figures 3- 4); determining a submission time for 
the submission request (see column 5, line 42 - column 6, line 51; column 7, 
lines 1-15; column 11, line 45 - column 12, line 6; Figures 3- 4); and comparing 
the session time remaining to a difference between the submission time and the 
first time (see column 5, line 42 - column 6, line 51; column 7, lines 1-15; column 
1 1 , line 45 - column 12, line 6; Figures 3- 4). 

As per claim 7, Gupta discloses the first time comprises a display time for 
the data page (column 1 1 , line 45 - column 12, line 6; Figures 3- 4). 

As per claim 8, Gupta discloses the ensuring step comprises establishing 
another session with the network application if the session is invalid (see column 
5, line 42 - column 6, line 51; column 7, lines 1-15; column 12, lines 14-24; 
Figures 3- 4). 

As per claim 9, Gupta discloses data page is displayed in a first window, 
and wherein the establishing step includes displaying a login page in a second 
window (See abstract, see column 5, line 42 - column 6, line 51; column 7, lines 
1-15; column 11, line 45 - column 12, line 6; Figures 3- 4, application server 
redirects the user to login server and when authenticated login server redirects 
the user back to the application server inherently discloses data page is 
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displayed in a first window, and wherein the establishing step includes displaying 
a login page in a second window). 

As per claim 10, Gupta discloses establishing a session with a client (see 
column 2, lines 15- 67, column 4, line 30 - column 5, line 41; Figure 3); providing 
a data page to the client, wherein the data page ensures that the session is valid 
before submitting the application data (see column 2, lines 15- 67, column 4, line 
30 - column 5, line 41 ; Figure 3); and receiving an original submission of the 
application data from the client (see column 2, lines 15- 67, column 4, line 30 - 
column 5, line 41; Figure 3), wherein the application data is submitted to the 
network application without reentry by a user in case that the session has expired 
(see column 5, line 42- column 6, line 45, using cookies to submit user data to 
authenticate a user and not require a user to re authenticate itself as user name 
and variable are stored in the cookie). 

As per claim 11, Gupta discloses providing a login page to the client (see 
column 2, lines 15- 67, column 4, line 30 - column 5, line 41; Figure 3); receiving 
login data from the client (see column 2, lines 15- 67, column 4, line 30 - column 
5, line 41; Figure 3); and authenticating the login data (see column 2, lines 15- 
67, column 4, line 30 - column 5, line 41 ; Figure 3). 

As per claim 12, Gupta discloses receiving a request from the client for an 
invalid session (see column 2, lines 15- 67, column 4, line 30 - column 5, line 41; 
column 11, line 45 - column 12, line 24; Figure 3 - 4); and providing the login 
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page to the client in response (see column 2, lines 15- 67, column 4, line 30 - 
column 5, line 41 ; column 1 1 , line 45 - column 1 2, line 24; Figure 3-4). 

As per claim 13, Gupta discloses the data page includes a session time 
remaining (see column 2, lines 15- 67, column 4, line 30 - column 5, line 41; 
column 1 1 , line 45 - column 12, line 6; Figure 3 - 4). 

As per claim 14, Gupta discloses determining a display time for the data 
page (see column 5, line 42 - column 6, line 51; column 7, lines 1-15; column 11, 
line 45 - column 12, line 6; Figures 3- 4); determining a submission time for a 
submission request (see column 5, line 42 - column 6, line 51; column 7, lines 1- 
15; column 11, line 45 - column 12, line 6; Figures 3- 4); and comparing the 
session time remaining to a difference between the submission time and the first 
time (see column 5, line 42 - column 6, line 51; column 7, lines 1-15; column 11, 
line 45 - column 12, line 6; Figures 3- 4). 

As per claim 15, Gupta discloses a session system for establishing a 
session with a client (see column 2, lines 15- 67, column 4, line 30 - column 5, 
line 41; Figure 3); and a data system for providing a data page to the client and 
receiving an original submission of the application data from the client (see 
column 2, lines 15- 67, column 4, line 30 - column 5, line 41; Figure 3); wherein 
the data page ensures that the session is valid before submitting the application 
data (see column 2, lines 15- 67, column 4, line 30 - column 5, line 41; Figure 3) 
and wherein the application data is submitted to the network application without 
reentry by a user in case that the session has expired (see column 5, line 42- 
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column 6, line 45, using cookies to submit user data to authenticate a user and 
not require a user to re authenticate itself as user name and variable are stored 
in the cookie). 

As per claim 16, Gupta discloses the system of claim 15, further 
comprising a display system for displaying pages to a user (see column 5, line 42 
- column 6, line 51). 

As per claim 17, Gupta discloses the system of claim 15, wherein the 
session system provides a login page to the client in response to a request for an 
invalid session (see column 4, line 30 - column 5, line 41; column 11, line 45 - 
column 12, line 24; Figure 3 - 4). 

As per claims 18-22, claims 18-22 are program product claims of method 
claims of 1-3, 5-6 and 9. They do not teach or further define over the limitation as 
recited in claims 1-3, 5-6 and 9. Therefore, claims 18-22 are rejected under same 
scope as discussed in claims 1-3, 5-6 and 9, supra. 

Conclusion 

9. A shortened statutory period for reply to this non-final action is set to expire 
THREE MONTHS from the mailing date of this action. Failure to respond within the 
period for response will result in ABANDONMENT of the applicant (See 35 U.S.C 133, 
M.P.E.P 710.02,71002 (b)). 
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Contact Information 

10. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Saket K. Daftuar whose telephone number is 571-272- 
8363. The examiner can normally be reached on 8:30am-5:00pm M-W. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, John Follansbee can be reached on 571-272-3964. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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